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DESCRIPTION 

GATEWAY SYSTEM AND RECORDING MEDIUM 
0S> 

5 TECHNICAL FIELD 

The present invention relates to a gateway 
system which relays a request from a user for a 
service provided by another system and to a 
recording medium therefor. 

10 

BACKGROUND ART 

According to a conventional intranet 
(network within organization), user IDs and 
passwords used therein are managed separately from 

15 user IDs and passwords for world wide web (WWW) 

servers (for example, pay WWW servers provided with 
databases each storing large-scale information) of 
other networks linked to the intranet, and each of 
the WWW servers is accessed and a billing is 

20 processed by using a proper user ID and password. 

Therefore, it is necessary to manage the 
user IDs and passwords for the intranet separately 
from those for other WWW servers, thus being 
inconvenient for users. 

25 In order to eliminate this disadvantage, 

the present invention aims at providing a desired 
information service with a single user ID and 
password entered on the side of each user. 
According to the present invention, this is realized 

30 by transmitting a request from each user received by 
a gateway to another desired information provider 
server or gateway with the user ID and password 
being converted and by returning a response to the 
request to the user through a reverse conversion 

35 process when the response is received. 
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DISCLOSURE OF THE INVENTION 

A description will be given, with 
reference to FIG. 1 , of a system for eliminating the 
disadvantage . 

5 According to FIG. 1, a gateway 1 receives 

a request from a user 7, transmits the received 
request to another gateway 8 or an information 
service provider 9, and transmits returned data to 
the requesting user 7. The gateway 1 includes a 

10 data transmission/reception unit 2, an 

authentication unit 3, a designation conversion unit 
4, an authentication table 5, and a designation 
conversion table 6. 

The data transmission/reception unit 2 

15 receives and transmits data. The authentication 

unit 3 authenticates the request from the user 7 by 
referring to the authentication table 5. 

The designation conversion unit 4 converts 
or inversely converts a designation by referring to 

20 the designation conversion table 6. 

Next, a description will be given of an 
operation of the above-described system. 

The request from the user 7 is supplied 
first to the authentication unit 3. The 

25 authentication unit 3 checks a user ID and password 
upon receiving the request from the user 7. If the 
result of the check by the authentication unit 3 is 
n OK", the designation of a service requested by the 
designation conversion unit 4 and a password are 

30 fetched from the designation conversion table 6, and 
the data is converted. 

The data converted by the designation 
conversion unit 4 is supplied to the data 
transmission/reception unit 2. The data 

35 transmission/reception unit 2 transmits the data 

supplied from the designation conversion unit 4 to 
the gateway 8 or the information service provider 9. 
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When data responding to the transmitted data is 
returned from the gateway 8 or the information 
service provider 9 to the data 
transmission/reception unit 2, the data 
5 transmission/reception unit 2 supplies the returned 
data to the designation conversion unit 4. 

The returned data received by the data 
transmission/reception unit 2 is inversely converted 
by the designation conversion unit 4. The data 

10 inversely converted by the designation conversion 
unit 4 is supplied to the data 
transmission/reception unit 2. The data 
transmission/reception unit 2 receives the inversely 
converted data from the designation conversion unit 

15 4 and transmits the inversely converted data to the 
requesting party of the user 7. 

At this point, the user ID and password of 
the requesting user 7 are converted if entered in 
the authentication table 5, and if not, the user 7 

20 is asked for reentry of the user ID and password or 
an error is detected. 

In the conversion of the designation, the 
designation conversion unit 4 fetches a 
representative ID and representative password 

25 corresponding to the designation from the 

designation conversion table 6 and sets the user ID 
in the representative ID. Further, the designation 
conversion unit 4, when transmitting service 
information after receiving the representative ID 

30 and representative password, performs a billing by 
relating information on the representative ID 
including the user ID of the user 7 to the service 
information and collecting the information on the 
representative ID. Moreover, the designation 

35 conversion unit 4, when the reverse conversion is 

performed, also converts the designation included in 
control information, which is set in the returned 
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data and includes the access data of the user 7 to a 
WWW server. 



information service with the single user ID and 
5 password entered on the user's side by transmitting 
the request from the user received by the gateway 1 
to another desired information provider server or 
gateway with the user ID and password being 
converted and by returning the response to the 
10 request to the user through the reverse conversion 
process when the response is received. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram of a system of 
15 the present invention; 

FIG. 2 is a flowchart illustrating an 
operation of the present invention; 

FIG. 3 is a flowchart illustrating the 
operation of the present invention; 
20 FIG. 4 shows examples of tables according 

to the present invention; 

FIG. 5 is a diagram illustrating an 
operation of the present invention; 

FIG. 6 is a flowchart illustrating a 
25 detailed operation of the present invention; 

FIG. 7 is a flowchart illustrating a 
detailed operation of the present invention; 

FIG. 8 is a flowchart illustrating a 
detailed operation of the present invention; 
30 FIG. 9 is a flowchart of a conversion 

process of setting information of "Cookie" according 
to the present invention; and 



operation according to another embodiment of the 
35 present invention. 



Therefore, the user can receive a desired 



FIG. 10 is a diagram illustrating an 
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BEST MODE FOR CARRYING OUT THE INVENTION 

Next, a detailed description will be given, 
with reference to FIGS. 1 through 10, of embodiments 
of the present invention. 
5 FIG. 1 is a block diagram showing a system 

of the present invention. 

According to FIG. 1, the gateway 1, which 
is connected to the Internet or local area networks 
(LANs), receives a request from the user 7, 

10 transmits the received request to the gateway 8 or 
the information service provider 9, and transmits 
returned data to the requesting user 7. The gateway 
1 includes the data transmission/reception unit 2, 
the authentication unit 3, the designation 

15 conversion unit 4, the authentication table 5, and 
the designation conversion table 6. 

According to FIG. 1, only the gateway 1 is 
connected between the user 7 and an information 
service provider 10. However, a plurality of the 

20 gateways 1 may be hierarchically connected 

therebetween. In such a case, each of the gateways 
1 performs a conversion or reverse conversion 
process according to a later-described process shown 
in FIGS. 2 and 3 so that the user 7 can receive a 

25 desired service automatically with the single user 
ID and password by accessing a WWW server connected 
to any of the gateways 1 having the hierarchical 
structure . 

The data transmission/reception unit 2 
30 receives and transmits data. The authentication 

unit 3 checks the user ID and password included in 
the data (request) received from the user 7 by 
referring to the authentication table 5, and further 
checks a designation (authorized information). 
35 The designation conversion unit 4 converts 

or inversely converts the designation including the 
user ID, a designation ID, a designation address 
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( URL : Uniform Resource Locator) and the password by 
referring to the designation conversion table 6. 

In the authentication table 5, authorized 
information (designation IDs), organization IDs and 
5 so on are entered in advance in correspondence to 

user IDs and passwords (see FIG. 4(a)). Designation 
URLs, representative IDs, representative passwords 
and so on are in advance entered in the designation 
conversion table 7 in correspondence to the 
10 designation IDs. 

The gateway 8 has the same structure as 
the gateway 1. The information service provider 9 
is a server which provides a variety of information 
and has a large-scale database. The information 
15 service provider 9 has the same inside structure as 
the gateway 1 and transmits a request for service to 
another information service provider 10. 

The information service provider 10 is a 
server which provides a variety of information. 
20 Next, a description will be given, 

according to the order of the flowcharts of FIGS. 2 
and 3, of an operation of the whole system of FIG. 1. 

FIGS. 2 and 3 are flowcharts illustrating 
the operation of the present invention. According 
25 to FIG. 2, a Web page request is made in step SI. 

This step transmits the Web page request (/AAA) for 
a Web page selected from a list, which Web page the 
user 7 wishes to have. 

The data is received in step S2. In this 
30 step, the data transmission/reception unit 2 of the 
gateway 1 receives the Web page request data 
transmitted in step SI. 

An authentication check is made in step S3. 
In this step, the authentication unit 3 checks 
35 whether the user ID and password are included in the 
data received in step S2 . 

If the result of the authentication check 
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in step S3 is "NG" , that is, the user ID and 
password are not included in the data, a message 
requesting entry of the user ID and password is 
transmitted in step S4 . 
5 On the other hand, if the result of the 

authentication check in step S3 is "OK", that is, if 
the user ID and password are included in the data, 
the process proceeds to step S8 . 

In step S5, it is determined whether the 

10 user ID is already entered. In this step, it is 
determined whether the user ID is already entered 
into a browser on the side of the user 7. 

If the determination result of step 5 is 
"YES", the user has already entered the user ID and 

15 password into the browser opened on a screen. 

Therefore, the browser sets the user ID and password 
in control data output at the time of the Web page 
request and transmits the user ID and password to 
the gateway 1 . 

20 On the other hand, if the determination 

result of step S5 is "NO", the user has not entered 
the user ID and password into the browser opened on 
the screen. Therefore, the user enters the user ID 
and password in a predetermined region on the screen 

25 and transmits the user ID and password to the 

gateway 1. At this point at least below-described 
information is transmitted: 

User ID/Password: ex. userl/passl 

URL: ex. a gateway name and a designation 

30 ID (/AAA) 

In step S8, the above-described 
information is received. At this point, the data 
transmission/reception unit 2 of the gateway 1 
stores a connection ID. Hereafter, the transmission 
35 and reception of the data (packet) (for example, 

data transmission in step S13) are performed using 
the connection ID. 
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In step S9, the user ID and password are 
checked. In this step, it is checked, by referring 
to the later-described authentication table 5 of FIG 
4(a), whether a user ID and password corresponding 
5 to the user ID and password included in the data 
received in step S8 are entered in the 
authentication table 5. 

If the check result of step S9 is "OK", 
the process proceeds to step S10. 

10 If the check result of step S9 is "NG" , an 

error message is transmitted to ask the user 7 for 
reentry of the user ID and password, and "ERROR" is 
displayed when a number of reentries exceeds a 
predetermined number of times. 

15 In step S10, it is checked whether a 

service is accessible. In this step, it is checked, 
by referring to the authentication table 5 of FIG. 
4(a), whether the requested service, for example, 
* /AAA" , is entered and authorized in the authorized 

20 information, namely, the designation ID of an entry 
corresponding to the user ID and password of step S9 

If the check result of the step S10 is 
"OK", the process proceeds to step Sll. 

If the check result of the step S10 is 

25 "NO" , it is determined that the requested service is 
not entered and authorized in the authentication 
table 5, so that an "NG" message is transmitted to 
the user 7 and it is displayed on the screen that 
the requested service is not authorized. 

30 In step Sll, the designation ID is checked. 

In this step, since the check result of step S10 is 
"OK" and the requested service is entered in the 
authorized information list of the authentication 
table 5 of FIG. 4(a), it is checked whether the 

35 desired designation ID (authorized information) is 

entered in the designation conversion table 6 of FIG 
4(b) . 
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If the check result of step Sll is "OK" , 
the process proceeds to step S12. 

If the check result of step Sll is "NO", 
the designation ID is not entered. Therefore, an 
5 "NG" message is transmitted to be displayed on the 
screen to notify the user 7 that the designation ID 
is not entered. 

In step S12, a conversion process is 
performed. In this step, the check result of step 
10 Sll is "OK" and it is determined that the authorized 
designation ID is entered in the designation 
conversion table 6 of FIG. 4(b). Therefore, after 
Designation URL: ex. www.ggg.co.jp 
Representative ID/Representative password : 
15 ex. GGG + UserlD + Option/PassA 

are fetched from the designation conversion table 6, 
the user ID of "userl" is embedded into the above- 
described information to form: 

Designation URL: ex. www.ggg.co.jp 
20 Representative ID/Representative password: 

ex. GGG. Userl/PassA 

Step S13 is a data transmission process. 
In step S13, data in which the designation URL, 
representative ID and representative password formed 
25 in step S12 are set is transmitted. 

In step S14, the information service 
provider 9 having the designation URL receives the 
data transmitted in step S13 and stores the 
connection ID for returning data. 
30 In step S15, the representative ID and 

representative password received in step S14 are 
checked . 

If the check result of step S15 is "OK", 
the process proceeds to step S16. 
35 If the check result of step S15 is "NO", 

an "NG" message is transmitted to the data 
transmitter . 
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Step S16 is a data preparation process. 
In step S16, data for which a request for service 
has been made is prepared. 

In step S17, billing information is 
5 collected. In this step, necessary billing 

information such as the representative ID and the 
contents of the request for service received in step 
S14 is prepared to be stored. Since the user ID of 
the service requesting user 7 and the organization 
10 ID of an organization to which the user 7 belongs 
are embedded into the representative ID, it is 
possible to perform a billing by the user or the 
organization. 

According to FIG. 3, step S18 is a data 
15 transmission process. In step S18, the data, namely, 
the data for which the request for service has been 
made, is transmitted to the gateway 1 based on the 
connection ID stored in step S14. 

In step S19, the gateway 1 receives the 
20 data transmitted in step S18. 

Step S20 is a reverse conversion process. 
In step S20, the reverse conversion process, which 
is reverse to the above-described conversion process 
performed in step S12 of FIG. 2, is performed. In 
25 step S20, data conversion is performed based on a 
URL. For example, "www.ggg.co.jp" is inversely 
converted into " gatewayname/AAA" . 

Step S21 is a data transmission process. 
In this step, the data is transmitted to the 
30 requesting user 7 based on the connection ID stored 
in step S8 . 

In step S22, the user 7 receives the data 
transmitted in step S21. 

Step S23 is a display process. Then, the 
35 process returns to step SI of FIG. 2(A) and the 
above-described steps are repeated. 

As described above, the user 7 has only to 
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make the request to the gateway 1 for the data, and 
the gateway 1 checks the user ID/password/authorized 
information by referring to the authentication table 
5 of FIG. 4(a) and automatically converts the user 
5 ID/password/authorized information, when the check 
result is "OK", into the designation of the service 
provider, the representative ID into which the user 
ID and the like are embedded, and the representative 
password by referring to the designation conversion 
10 table 6 of FIG. 4(b). The designation of the 

service provider, the representative ID and the 
representative password are then transmitted to the 
designation of the information service provider 9 or 
10. 

15 The information service provider 9 or 10 

prepares and returns the data for the service 
provided, and collects the billing information such 
as the representative ID and the name of the service 
provided. The gateway 1 inversely converts the 

20 designation when receiving the returned data and , 

transmits the data to the requesting user 7 so that 
the user 7 can receive the service with the data 
shown on the screen. This allows the user 7, who is 
conscious only of the gateway 1, to automatically 

2 5 receive the service provided from the information 

service provider 9 or 10 with the single user ID and 
password. This also allows the information service 
provider 9 or 10 to perform, by collecting the 
representative ID and the name of the service, the 
30 billing for the provided service by the user ID or 

the organization ID of the organization to which the 
user belongs. 

FIG. 4 shows examples of the tables 
according to the present invention. 

3 5 FIG. 4(a) shows an example of the 

authentication table. As shown therein. 
User ID: 
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Pas sword: 



Authorized information (designation ID) : 
Option ID (organization ID or the like): 



Others : 



5 are entered and related to one another in the 
authentication table 5. 

Here, the user ID is an ID assigned only 
to the user 7 of FIG . 1. The password is a secret 
password for each user ID. The authorized 
10 information (designation ID) is information 

(designation ID) on an authorized service. The 
option ID is the organization ID assigned only to 
the organization to which the user 7 belongs. 

The above-described checks in steps S9, 
15 S10, and Sll can be made by entering the above- 
described information in the authentication table 5. 
The entry of data in, alteration of data entered in, 
and deletion of entered data from the authentication 
table 5 can be made easily by the respective 
20 operations of addition, alteration, and deletion. 

FIG. 4(b) shows an example of the 
designation conversion table. As shown therein. 



are entered and related to one another in the 

30 designation conversion table 6. 

Here, the designation ID corresponds to 
the authorized information (designation ID) of the 
authentication table 5 of FIG. 4(a). The 
designation URL is the URL (address) of a 

35 designation, and the representative ID includes a 
user ID and the organization ID of an organization 
to which each user belongs. The representative 



25 



Designation ID: 
Designation URL: 

Representative ID: ex. GGG + UserlD + 



OptionID 



Representative password: 



Others : 
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password, which includes a user ID, is a password 
assigned to a given group, organization or gateway. 

By entering the above-described 
information in the designation conversion table 6 as 
5 described above, the conversion of the designation 
and password and the reverse conversion of the 
designation can be made automatically with reference 
to the designation conversion table 6 when the 
above-described conversion process of step S12 of 

10 FIG. 2 and reverse conversion process of step S20 of 
FIG. 3 are performed. 

The entry of data in, alteration of data 
entered in, and deletion of entered data from the 
designation conversion table 6 can be made easily by 

15 the respective operations of addition, alteration, 
and deletion. 

FIG. 5 illustrates an operation (selection 
from the list) of the present invention. This 
describes the details of steps to be taken to make a 

20 selection from the list of services provided. The 
list is downloaded from the gateway 1 to the user 7 
so as to be displayed on the screen before the 
above-described Web page request is made in step SI 
of FIG. 2. 

25 FIG. 5(a) shows a flowchart. According to 

FIG. 5(a), the user 7 transmits a list request in 
step S21. In step S22, the list is transmitted. 
That is, a WWW server receives the list request 
transmitted in step S21 and transmits the requested 

30 list to the user 7 (the browser of the user 7). 

In step S23, the list is displayed. That 
is, the list transmitted in step S22 is displayed on 
the browser opened on the screen on the side of the 
user 7. The list is displayed, for example, as 

35 shown in later-described FIG. 5(b) or 5(c). 

In step S24, selection is made from the 
list. In this step, the user operates a mouse to 
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select one service from the list of FIG. 5(b) or 
5(c) on the screen. Then, the process proceeds to 
above-described step SI of FIG. 2. 

Thus, the user 7 is allowed to make the 
5 list request to the WWW server and select the one 
service from the list of FIG. 5(b) or 5(c) on the 
screen. FIG. 5(b) shows an example 1 of the list, 
in which the designation ID is used. As shown 
therein, designation IDs such as "AAA" and "BBB " are 
10 used. 

FIG. 5(c) shows an example 2 of the list, 
in which the designation ID is not used. As shown 
therein, designation URLs are provided instead of 
the designation IDs. 
15 FIG. 6 is a first flowchart illustrating a 

detailed operation of the present invention. 

This flowchart illustrates a detailed 
operation of above-described steps S9 and S10 of FIG. 
2 . 

20 According to FIG. 6, in step S31, the user 

ID and password are fetched. In this step, the 
authentication unit 3 fetches, for example, 
"userl/passl " , which is noted on the right of step 
S31 in FIG. 6, as the user ID and password from the 

25 data received from the user 7. 

In step S32, a comparison is made between 
the fetched user ID and password and user IDs and 
passwords in the authentication table 5. In this 
step, the user ID and password are compared with, 

30 for example, a user ID and password "userl/passl " 

entered in the authentication table 5 of FIG. 4(a). 

In step S33, it is determined whether the 
fetched user ID and password correspond to the user 
ID and password entered in the authentication table 

35 5. If correspondence is found as a result of step 
S33, the process proceeds to step S34. 

If no correspondence is found as a result 
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of step S33, an "NG" message is transmitted to the 
user 7 and it is displayed on the screen that the 
user ID and password entered are wrong so as to ask 
for reentry of the user ID and password. If wrong 
5 user IDs and passwords are entered the predetermined 
number of times, the process is terminated as an 
error . 

In step S34, the designation ID is fetched. 
In this step, since the check result of the user ID 

10 and password is "OK", the designation ID "AAA", for 
example, is fetched from the data. 

In step S35, the fetched designation ID is 
compared with authorized information, namely, a 
designation ID corresponding to "userl" in the 

15 authentication table. In this step, the designation 
ID "AAA" fetched in step S34 is compared with 
authorized information, namely, a designation ID 
"AAA, BBB" entered in the authentication table of 
FIG. 4(a), which designation ID corresponds to the 

20 user ID, for example, "userl" approved through steps 
S31 through S33. In this case, "AAA" exists 
correspondingly in both of the designation IDs . 

In step S36, it is determined whether 
"AAA" is included in the authorized information of 

25 "userl". In this case, since "AAA" is included 
therein, the determination result of step S36 is 
"OK". This means that all of the user ID, password 
and designation ID are authenticated. On the other 
hand, if the determination result of step S36 is 

30 "NO", an "NG" message is transmitted to be displayed 
on the screen to notify the user 7 of the above 
result . 

Thus, it is possible to make the checks on 
the user ID, password and designation ID included in 
35 the data received from the user 7 by referring to 
the above-described authentication table 5 of FIG. 
4(a) . 
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FIG. 7 is a second flowchart illustrating 
a detailed operation of the present invention. 

This flowchart illustrates a detailed 
operation of above-described steps Sll and S12 of 
5 FIG. 2. 

According to FIG. 7, in step S41, a 
comparison is made between designation IDs in the 
designation conversion table and "/AAA". In this 
step, for example, the designation ID "AAA" fetched 

10 in step S34 of FIG. 6 is compared with designation 

IDs entered in the designation conversion table 6 so 
as to see if there is a designation ID corresponding 
to the designation ID "AAA" in the designation 
conversion table 6 . 

15 In step S42 # it is determined whether 

"/AAA" is included in the designation IDs in the 
designation conversion table 6 . If it is determined 
in step S42 that "/AAA" is included therein, the 
process proceeds to step S43. 

20 If it is determined in step S42 that 

"/AAA" is not included therein, the determination 
result of step S42 is "NG" and an error is detected. 
In step S43, a designation URL corresponding to 
"/AAA" is fetched from the designation conversion 

25 table. In this step, the designation URL 

"www.ggg.co.jp" is fetched from the entries of FIG. 
4(b) . 



corresponding to "/AAA" is fetched from the 
30 designation conversion table. In this step, the 

representative ID format "GGG + UserlD + OptionID" 
is fetched from the entries of FIG. 4(b). 



formed. In this step, the user ID "userl" is 
35 embedded into the representative ID format fetched 
in step S44 to form the representative ID "GGG. 
userl " . 



In step S44, a representative ID format 



In step S45, the representative ID is 
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In step S46, a representative password 
corresponding to "/AAA" is fetched from the 
designation conversion table. In this step, the 
representative password "passA" is fetched from the 
5 entries of FIG. 4(b). 



by referring to the designation conversion table 6, 
the designation URL to which the data is transmitted 

10 and the representative ID and representative 

password which replace the user ID and password, 
respectively. The data can be transmitted by 
replacing (changing) the original designation URL, 
user ID and password with the automatically formed 

15 designation URL, representative ID and 
representative password . 

FIG. 8 is a third flowchart illustrating a 
detailed operation of the present invention. This 
flowchart illustrates a detailed operation of the 

20 above-described step S20 of FIG. 3. 

According to FIG. 8, in step S51, the 
received data (HTML) is read in. 

In step S52, link information in the HTML 
is compared with designation URLs in the designation 

25 conversion table. The link information (URL) 

"www.ggg.co. jp" fetched from the received HTML data, 
for example, is compared with the above-mentioned 
designation URLs in the designation conversion table 
6 of FIG. 4(b) . 

30 In step S53, a designation ID 

corresponding to the link information is found. In 
this step, if it is determined, as a result of the 
comparison made in step S52, that the link 
information corresponds to, for example, 

35 " www .ggg.co.jp" in the designation conversion table 
6 of FIG. 4(b), the designation ID "AAA" in the head 
of the entry is found. 



Step S47 is a transmission request process. 
Thus, it is possible to automatically form. 
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In step S54, the received data (HTML) is 
converted into a gateway name and a designation ID, 
for example, "Gatewayname + AAA". 

Thus, the designation ID corresponding to 
5 the URL fetched from the received data (HTML) is 
found by referring to the designation conversion 
table 6, and inversely converted into and replaced 
with the gateway name and the designation ID so that 
the data is transmitted to the requesting user 7 
10 based on the connection ID stored in step S8 . 

By this, the user 7 recognizes that the 
data is returned from the gateway 1, to which the 
request for the data is made. 

Next, a detailed description will be given, 
15 with reference to FIGS. 9 and 10, of an embodiment 
in which the present invention is applied to so- 
called "Cookie". Here, "Cookie" is a function of 
(software for) a server to cause a machine on the 
side of a client to retain information native to the 
20 client. "Cookie" is written in a line marked with 
* in the control information of data as shown in 
later-described FIG. 10(c). Since "Cookie" includes 
designation information (address information) , the 
designation conversion unit 4 similarly performs the 
25 reverse conversion in the above-described gateway 1 
of the present invention. 

The detailed description will be given in 
the following. 

FIG. 9 shows a flowchart of a conversion 
30 process of the setting information of "Cookie" 
according to the present invention. 

According to FIG. 9, in step S61, the 
control information of received data is read in. In 
step S62, it is determined whether the setting 
35 information of "Cookie" is included in the control 

information. In this step, it is determined whether 
the setting information of "Cookie" such as 
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Set -Cookie ; sample= 12345 ; domain= .zzzzzzz.co.jp; path=/ ; , 
as shown in (a) noted on the right of the flowchart 
in FIG. 9, is written. If the determination result 
of step S62 is "YES", the process proceeds to step 
5 S63. If the determination result of step S62 is 
"NO", the process is terminated. 

In step S63, the setting information of 
"Cookie" is compared with the designations in the 
designation conversion table 6. 

10 In step S64, a designation ID 

corresponding to the domain of the setting 
information is found. In steps S63 and S64, for 
example, as noted on the right of steps S63 and S64 
in FIG. 9, domain information shown in (b) is first 

15 fetched from the setting information of "Cookie" 

shown in (a), which information is read in through 
steps S61 and S62, and then, the domain shown in (c) 
is fetched from the domain information. 

Next, as shown in (d), the designation ID, 

20 "FFF" in this case, corresponding to the domain 
shown in (c) is fetched by referring to the 
designation conversion table 6. 

In step S65, the setting information of 
"Cookie" included in the control information of the 

25 received data is converted. In this step, the 
underlined domain information in the setting 
information of "Cookie" before conversion shown in 
(e) is converted into and replaced with an 
underlined designation ID in the converted setting 

30 information of "Cookie" shown in (f) based on the 
designation ID "FFF" found in step S64. (This 
process corresponds to the above-described reverse 
conversion . ) 

Thus, the setting information of "Cookie" 

35 before conversion shown in (e), which information is 
included in the received data, is automatically 
converted into the converted setting information of 
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"Cookie" shown in (f). This conversion can be 
performed together with the reverse conversion of 
the designation marked with in FIG. 10, which 
reverse conversion is previously described with 
5 reference to FIG. 1 or 8 . 

FIG. 10 is a diagram illustrating another 
operation of the present invention. FIG. 10 shows 
an example according to the above-described 
flowchart of FIG. 9. FIG. 10(a) shows an example of 
10 the name of the server including the gateway. Here, 
the name is as follows: 

Server name: www.gateway-Server.co. jp 
FIG. 10(b) shows an example of the setting 
contents of the designation conversion table 6. 
15 Here, the setting contents are set as follows: 

Designation ID: FFF (of FIG. 4(b)) 
Actual designation: www.ZZZZZZZ.co.jp 
FIG. 10(c) shows an example of the 
received data. FIG. 10(c) shows an example of the 
20 contents of data returned from a WWW server 

(included in the information service provider 9) to 
the gateway 1. The line marked with * in the 
control information (a) in FIG. 10(c) is the setting 
information of "Cookie", which is identical to the 
25 setting information thereof shown in FIG. 9(a). A 
line marked with it is the information described 
with reference to FIGS. 1 through 8. 

FIG. 10(d) shows data after the reverse 
conversion process. The data is obtained after the 
30 conversion performed in accordance with above- 
described steps S63 through S65. In the data, a 
line marked with * is the converted setting 
information of "Cookie", and a line marked with 
is the information after the above-described reverse 
35 conversion described with reference to FIGS. 1 
through 8 . 

As described above, according to the 
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present invention, the request from the user 7 
received by the gateway 1 is transmitted to another 
desired information provider server or gateway with 
the user ID and password being converted. Further, 
5 when the response to the request is received, the 
response is returned to the user 7 through the 
reverse conversion process and at the same time, the 
designation included in the control information 
including access data of the user to the WWW server 
10 is inversely converted. Therefore, the user 7 can 
receive a desired information service with the 
single user ID and password entered on the user's 
side. 



passwords for different WWW servers or WWW servers 
having different billing systems have to be managed 
separately, the present invention allows the user 7 
to automatically access a plurality of WWW servers 
20 having different billing systems through the gateway 
1 with the single user ID and password; 



information of the user 7 to a WWW server (for 
example, the setting information of "Cookie"), which 

25 control information is included in received data, 
can be utilized effectively with the gateway 1 
according to the present invention automatically 
inversely converting a designation included in the 
received data; and 

30 (3) with a plurality of the gateways 1 

according to the present invention being provided 
between the user 7 and an information service 
provider (WWW server) in a hierarchical structure, 
the user 7 can also automatically access a desired 

35 WWW server with the single user ID and password to 
receive a desired service if each of the gateways 1 
similarly performs the conversion and reverse 



Thus : 



15 



(1) although, conventionally, user IDs and 



(2) control information including access 
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conversion . 



